Lujo Bauer

Alfred Kobsa, Nalini Venkatasubramanian, Lujo Bauer, 2017, 2017 IEEE 37th International Conference on Distributed Computing Systems Workshops (ICDCSW).

(How) Do people change their passwords after a breach? pdf

Apu Kapadia, Lujo Bauer, Sruti Bhagavatula, 2020, ArXiv.

Modeling and Enhancing Android’s Permission System (CMU-CyLab-11-020)

Lujo Bauer, Limin Jia, Elli Fragkaki, 2011 .

Composing security policies with polymer

Lujo Bauer, David Walker, Jay Ligatti, 2005, PLDI '05.

Password Creation in the Presence of Blacklists

Blase Ur, Lujo Bauer, Nicolas Christin, 2017 .

Run-Time Enforcement of Information-Flow Properties on Android - (Extended Abstract)

Lujo Bauer, Limin Jia, Shinsaku Kiyomoto, 2013, ESORICS.

Let's Go in for a Closer Look: Observing Passwords in Their Natural Habitat

Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, 2017, CCS.

More than skin deep: measuring effects of the underlying model on access-control system usability

Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, 2011, CHI.

Human Factors, Defaults, and Automation: Challenges and Opporunities

Lujo Bauer, 2014, SafeConfig '14.

Check Points against Privacy Breaches in Android Applications

Lujo Bauer, Limin Jia, Shinsaku Kiyomoto, 2012 .

The Effectiveness of Security Images in Internet Banking

Lujo Bauer, Michelle L. Mazurek, Joel Lee, 2015, IEEE Internet Computing.

n-ML: Mitigating Adversarial Examples via Ensembles of Topologically Manipulated Classifiers pdf

Lujo Bauer, Michael K. Reiter, Mahmood Sharif, 2019, ArXiv.

Comparing Hypothetical and Realistic Privacy Valuations

Lujo Bauer, Michelle L. Mazurek, Mahmood Sharif, 2018, WPES@CCS.

xDomain: Cross-border Proofs of Access (CMU-CyLab-09-005)

Lujo Bauer, Michael K. Reiter, Limin Jia, 2009 .

Warning Design Guidelines (CMU-CyLab-13-002)

Lujo Bauer, Lorrie Faith Cranor, Lorrie Faith Cranor, 2013 .

Usability and Security of Text Passwords on Mobile Devices

Blase Ur, Lujo Bauer, Nicolas Christin, 2016, CHI.

Run-Time Enforcement of Information-Flow Properties on Android (CMU-CyLab-12-015)

Lujo Bauer, Limin Jia, Shinsaku Kiyomoto, 2012 .

What are the most important challenges for access control in new computing domains, such as mobile, cloud and cyber-physical systems?

Lujo Bauer, Florian Kerschbaum, 2014, SACMAT '14.

Usable key agreement in home networks

Lujo Bauer, Adrian Perrig, Ramu Panayappan, 2009, 2009 First International Communication Systems and Networks and Workshops.

Composing expressive runtime security policies

Lujo Bauer, David Walker, Jay Ligatti, 2009, TSEM.

Introducing Reputation Systems to the Economics of Outsourcing Computations to Rational Workers

Lujo Bauer, Michael K. Reiter, Jassim Aljuraidan, 2016, Financial Cryptography.

What Makes People Install a COVID-19 Contact-Tracing App? Understanding the Influence of App Design and Individual Difference on Contact-Tracing App Adoption Intention pdf

Lujo Bauer, Tianshi Li, Jason I. Hong, 2020, Pervasive Mob. Comput..

Run-Time Enforcement of Nonsafety Policies

Lujo Bauer, David Walker, Jay Ligatti, 2009, TSEC.

Diversify to Survive: Making Passwords Stronger with Adaptive Policies

Blase Ur, Lujo Bauer, Nicolas Christin, 2017, SOUPS.

Proceedings of the 23nd ACM on Symposium on Access Control Models and Technologies

Lujo Bauer, Florian Kerschbaum, X. Sean Wang, 2018, SACMAT.

Can Unicorns Help Users Compare Crypto Key Fingerprints?

Blase Ur, Lujo Bauer, Lorrie Faith Cranor, 2017, CHI.

Studying access-control usability in the lab: lessons learned from four studies

Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, 2012, LASER '12.

Preface of Special Issue on “Computer Security: Foundations and Automated Reasoning”

Luca Viganò, Jerry den Hartog, Sandro Etalle, 2010, Journal of Automated Reasoning.

Guess again (and again and again): Measuring password strength by simulating password-cracking algorithms (CMU-CyLab-11-008)

Lujo Bauer, Nicolas Christin, Michelle L. Mazurek, 2011 .

A Linear Logic of Authorization and Knowledge

Lujo Bauer, Michael K. Reiter, Frank Pfenning, 2006, ESORICS.

Device-Enabled Authorization in the Grey System ¶

Lujo Bauer, Michael K. Reiter, Scott Garriss, 2006 .

Some Recipes Can Do More Than Spoil Your Appetite: Analyzing the Security and Privacy Risks of IFTTT Recipes

Lujo Bauer, Anupam Das, Limin Jia, 2017, WWW.

Access right assignment mechanisms for secure home networks

James Newsome, Lujo Bauer, Adrian Perrig, 2011, Journal of Communications and Networks.

Principles of Security and Trust

Ralf Küsters, Lujo Bauer, Lujo Bauer, 2018, Lecture Notes in Computer Science.

Editorial

Calton Pu, Barbara Carminati, Lujo Bauer, 2014, Computers & security.

Toward strong, usable access control for shared distributed data

Lujo Bauer, William Melicher, Manya Sleeper, 2014, FAST.

Device-Enabled Authorization in the Grey System (Extended Abstract)

Lujo Bauer, Michael K. Reiter, Scott Garriss, 2005 .

Metering Graphical Data Leakage with Snowman

Lujo Bauer, Michael K. Reiter, Qiuyu Xiao, 2020, SACMAT.

Measuring password guessability for an entire university

Blase Ur, Lujo Bauer, Nicolas Christin, 2013, CCS.

Access control on the Web using proof-carrying authorization

Andrew W. Appel, Lujo Bauer, Edward W. Felten, 2003, Proceedings DARPA Information Survivability Conference and Exposition.

A comparison of users' perceptions of and willingness to use Google, Facebook, and Google+ single-sign-on functionality

Lujo Bauer, William Melicher, Elli Fragkaki, 2013, Digital Identity Management.

Practical Recommendations for Stronger, More Usable Passwords Combining Minimum-strength, Minimum-length, and Blocklist Requirements

Lujo Bauer, Lorrie Faith Cranor, Nicolas Christin, 2020, CCS.

Detecting and resolving policy misconfigurations in access-control systems

Lujo Bauer, Michael K. Reiter, Scott Garriss, 2008, SACMAT '08.

Users Are still Not the Enemy: Applying Security Usability Principles to Covid-19 Return-To-Work Security

Limin Jia, Lujo Bauer, Anupam Das, 2020 .

What you want is not what you get: predicting sharing policies for text-based content on facebook

Yan Li, Lujo Bauer, Arunesh Sinha, 2013, AISec.

Consumable Credentials in Linear-Logic-Based Access-Control Systems

Lujo Bauer, Michael K. Reiter, Frank Pfenning, 2007, NDSS.

Run-time Monitoring and Formal Analysis of Information Flows in Chromium

Yuan Tian, Lujo Bauer, Limin Jia, 2015, NDSS.

User-Controllable Security and Privacy for Pervasive Computing

Lujo Bauer, Michael K. Reiter, Norman Sadeh, 2007 .

What matters to users?: factors that affect users' willingness to share information with online advertisers

Yang Wang, Blase Ur, Lujo Bauer, 2013, SOUPS.

How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation

Blase Ur, Lujo Bauer, Nicolas Christin, 2012, USENIX Security Symposium.

Accessorize to a Crime: Real and Stealthy Attacks on State-of-the-Art Face Recognition

Lujo Bauer, Michael K. Reiter, Mahmood Sharif, 2016, CCS.

Modeling and Enhancing Android's Permission System

Lujo Bauer, Limin Jia, Elli Fragkaki, 2012, ESORICS.

Why people (don't) use password managers effectively

Lujo Bauer, Nicolas Christin, Sarah Pearman, 2019, SOUPS @ USENIX Security Symposium.

Probabilistic Cost Enforcement of Security Policies

Dilsun Kirli Kaynar, Lujo Bauer, Fabio Martinelli, 2013, STM.

Encountering stronger password requirements: user attitudes and behaviors

Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, 2010, SOUPS.

Proceedings of the 21st ACM on Symposium on Access Control Models and Technologies

Lujo Bauer, Florian Kerschbaum, X. Sean Wang, 2016, SACMAT.

A Proof-Carrying Authorization System

Lujo Bauer, Edward W. Felten, Michael A. Schneider, 2001 .

Distributed System Security via Logical Frameworks (SeLF)

Lujo Bauer, Michael K. Reiter, Scott Garriss, 2008 .

Consumable Credentials in Logic-Based Access Control

Lujo Bauer, Michael K. Reiter, Frank Pfenning, 2006 .

Mobile SCALe: Rules and Analysis for Secure Java and Android Coding

Lujo Bauer, David Svoboda, Limin Jia, 2013 .

Timing-Sensitive Noninterference through Composition

Lujo Bauer, Limin Jia, Willard Rafnsson, 2017, POST.

Types and Effects for Non-interfering Program Monitors

Lujo Bauer, David Walker, Jay Ligatti, 2002, ISSS.

Self-driving cars and data collection: Privacy perceptions of networked autonomous vehicles

Lujo Bauer, Joshua Tan, Cara Bloom, 2017, SOUPS.

A Language and System for Composing Security Policies

Lujo Bauer, David Walker, Jay Ligatti, 2004 .

The Impact of Length and Mathematical Operators on the Usability and Security of System-Assigned One-Time PINs

Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, 2013, Financial Cryptography Workshops.

Of passwords and people: measuring the effect of password-composition policies

Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, 2011, CHI.

xDomain: cross-border proofs of access

Lujo Bauer, Michael K. Reiter, Limin Jia, 2009, SACMAT '09.

Don't Bump, Shake on It: the exploitation of a popular accelerometer-based smart phone exchange and its secure replacement

Lujo Bauer, Ahren Studer, Timothy Passaro, 2011, ACSAC '11.

Optimization-Guided Binary Diversification to Mislead Neural Networks for Malware Detection pdf

Lujo Bauer, Michael K. Reiter, Saurabh Shintre, 2019, ArXiv.

Can long passwords be secure and usable?

Blase Ur, Lujo Bauer, Nicolas Christin, 2014, CHI.

Mechanisms for secure modular programming in Java

Andrew W. Appel, Lujo Bauer, Edward W. Felten, 2003, Softw. Pract. Exp..

Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks

Blase Ur, Lujo Bauer, Nicolas Christin, 2016, USENIX Annual Technical Conference.

Enforcing More with Less: Formalizing Target-Aware Run-Time Monitors

Dilsun Kirli Kaynar, Lujo Bauer, Yannis Mallios, 2012, STM.

User-Controllable Security and Privacy for Pervasive Computing

Lujo Bauer, Lorrie Faith Cranor, Norman M. Sadeh, 2007, Eighth IEEE Workshop on Mobile Computing Systems and Applications.

Distributed proving in access-control systems

Lujo Bauer, Michael K. Reiter, Scott Garriss, 2005, 2005 IEEE Symposium on Security and Privacy (S&P'05).

Guess Again (and Again and Again): Measuring Password Strength by Simulating Password-Cracking Algorithms

Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, 2011, 2012 IEEE Symposium on Security and Privacy.

Effects of access-control policy conflict-resolution methods on policy-authoring usability

Lujo Bauer, Michael K. Reiter, Robert W. Reeder, 2009 .

General Requirements of a Hybrid-Modeling Framework for Cyber Security

Lujo Bauer, Noam Ben-Asher, Nicolas Christin, 2014, 2014 IEEE Military Communications Conference.

The Influence of Friends and Experts on Privacy Decision Making in IoT Scenarios

Lujo Bauer, Lorrie Faith Cranor, Pardis Emami Naeini, 2018, Proc. ACM Hum. Comput. Interact..

Measuring Real-World Accuracies and Biases in Modeling Password Guessability

Blase Ur, Lujo Bauer, Nicolas Christin, 2015, USENIX Security Symposium.

Constraining Credential Usage in Logic-Based Access Control

Lujo Bauer, Limin Jia, Divya Sharma, 2010, 2010 23rd IEEE Computer Security Foundations Symposium.

A General Framework for Adversarial Examples with Objectives

Lujo Bauer, Michael K. Reiter, Mahmood Sharif, 2017, ACM Trans. Priv. Secur..

Edit Automata: Enforcement Mechanisms for

Lujo Bauer, David Walker, Jarred Adam Ligatti, 2003 .

How Risky Are Real Users' IFTTT Applets?

Lujo Bauer, Anupam Das, Limin Jia, 2020, SOUPS @ USENIX Security Symposium.

On the Suitability of Lp-Norms for Creating and Preventing Adversarial Examples

Lujo Bauer, Michael K. Reiter, Mahmood Sharif, 2018, 2018 IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW).

Proceedings of the Ninth Symposium on Usable Privacy and Security

Lujo Bauer, Konstantin Beznosov, Lorrie Faith Cranor, 2013, SOUPS 2013.

Challenges in Access Right Assignment for Secure Home Networks

James Newsome, Lujo Bauer, Adrian Perrig, 2010, HotSec.

A user study of policy creation in a flexible access-control system

Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, 2008, CHI.

Formal Analysis and Run-time Monitoring of Information Flows in Chromium: Technical Appendix (CMU-CyLab-14-015)

Lujo Bauer, Timothy Passaro, Shaoying Cai, 2015 .

User Behaviors and Attitudes Under Password Expiration Policies

Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, 2018, SOUPS @ USENIX Security Symposium.

Securing Early Software Development

Michalis Faloutsos, Giovanni Vigna, Lujo Bauer, 2012 .

Do Users' Perceptions of Password Security Match Reality?

Blase Ur, Lujo Bauer, Nicolas Christin, 2016, CHI.

Adversarial Generative Nets: Neural Network Attacks on State-of-the-Art Face Recognition pdf

Lujo Bauer, Michael K. Reiter, Mahmood Sharif, 2018, ArXiv.

Edit automata: enforcement mechanisms for run-time security policies

Lujo Bauer, David Walker, Jay Ligatti, 2005, International Journal of Information Security.

Expandable grids for visualizing and authoring computer security policies

Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, 2008, CHI.

Proceedings of the third ACM conference on Data and application security and privacy

Elisa Bertino, Lujo Bauer, Ravi Sandhu, 2013, CODASPY 2013.

Composing Expressive Run-time Security Policies

Lujo Bauer, David Walker, Jay Ligatti, 2007 .

Access Control for Home Data Sharing: Attitudes, Needs and Practices

Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, 2010, CHI 2010.

Enforcing Non-safety Security Policies with Program Monitors

Lujo Bauer, David Walker, Jay Ligatti, 2005, ESORICS.

Real life challenges in access-control management

Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, 2009, CHI.

Lessons learned from the deployment of a smartphone-based access-control system

Lujo Bauer, Lorrie Faith Cranor, Michael K. Reiter, 2007, SOUPS '07.

A Field Study of Computer-Security Perceptions Using Anti-Virus Customer-Support Chats

Lujo Bauer, Nicolas Christin, Matteo Dell'Amico, 2019, CHI.

Sharing Personal Content Online: Exploring Channel Choice and Multi-Channel Behaviors

Lujo Bauer, Lorrie Faith Cranor, Hana Habib, 2016, CHI.

Android taint flow analysis for app sets

Lujo Bauer, Limin Jia, William Klieber, 2014, SOAP '14.

What breach? Measuring online awareness of security incidents by studying real-world browsing behavior pdf

Apu Kapadia, Lujo Bauer, Sruti Bhagavatula, 2020, ArXiv.

Special issue on verified information flow security

Lujo Bauer, Andrei Sabelfeld, Toby C. Murray, 2017, J. Comput. Secur..

Designing Password Policies for Strength and Usability

Blase Ur, Lujo Bauer, Nicolas Christin, 2016, ACM Trans. Inf. Syst. Secur..

Efficient Proving for Practical Distributed Access-Control Systems

Lujo Bauer, Michael K. Reiter, Scott Garriss, 2007, ESORICS.

Privacy Expectations and Preferences in an IoT World

Lujo Bauer, Lorrie Faith Cranor, Pardis Emami Naeini, 2017, SOUPS.

Analyzing the dangers posed by Chrome extensions

Yuan Tian, Lujo Bauer, Limin Jia, 2014, 2014 IEEE Conference on Communications and Network Security.

Efficient Proving for Distributed Access-Control Systems

Lujo Bauer, Michael K. Reiter, Scott Garriss, 2006 .

Better Passwords through Science (and Neural Networks)

Blase Ur, Lujo Bauer, Nicolas Christin, 2017, login Usenix Mag..

"I Added '!' at the End to Make It Secure": Observing Password Creation in the Lab

Blase Ur, Lujo Bauer, Nicolas Christin, 2015, SOUPS.

The post anachronism: the temporal dimension of facebook privacy

Blase Ur, Lujo Bauer, Lorrie Faith Cranor, 2013, WPES.

Measuring Password Guessability for an Entire University (CMU-CyLab-13-013)

Blase Ur, Lujo Bauer, Nicolas Christin, 2013 .

A General and Flexible Access-Control System for the Web

Lujo Bauer, Edward W. Felten, Michael A. Schneider, 2002, USENIX Security Symposium.

Human-in-the-loop 에이전트 기반 모델링 및 시뮬레이션 구현

Lujo Bauer, Nicolas Christin, 2014 .

Exploring reactive access control

Lujo Bauer, Lorrie Faith Cranor, Hassan Takabi, 2010, CHI 2010.

Comparing Access-Control Technologies: A Study of Keys and Smartphones

Lujo Bauer, Michael K. Reiter, Robert W. Reeder, 2007 .

Riding out DOMsday: Towards Detecting and Preventing DOM Cross-Site Scripting

Lujo Bauer, William Melicher, Anupam Das, 2018, NDSS.

A Spoonful of Sugar?: The Impact of Guidance and Feedback on Password-Creation Behavior

Blase Ur, Lujo Bauer, Nicolas Christin, 2015, CHI.

Correct horse battery staple: exploring the usability of system-assigned passphrases

Blase Ur, Lujo Bauer, Nicolas Christin, 2012, SOUPS.

Towards a Lightweight, Hybrid Approach for Detecting DOM XSS Vulnerabilities with Machine Learning

Lujo Bauer, William Melicher, Limin Jia, 2021, WWW.

Constrained Gradient Descent: A Powerful and Principled Evasion Attack Against Neural Networks pdf

Lujo Bauer, Michael K. Reiter, Mahmood Sharif, 2021, ArXiv.

Malware Makeover: Breaking ML-based Static Analysis by Modifying Executable Bytes

Lujo Bauer, Michael K. Reiter, Saurabh Shintre, 2019, AsiaCCS.

Warning Design Guidelines

Lujo Bauer, Elli Fragkaki, Cristian Bravo-Lillo, 2013 .

A Privacy Assistant for the Internet of Things

Lujo Bauer, Alessandro Acquisti, Anupam Das, 2017 .

A Calculus for Composing Security Policies

Lujo Bauer, David Walker, Jarred Adam Ligatti, 2002 .